6885 matches found
mediawiki: Cross-site Scripting (XSS) and UI redressing
It was discovered that MediaWiki, a wiki engine, was separating the allowance of css and js modules resulting in Cross-site Scripting XSS and UI redressing issues...
PT-2014-4228
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 33.0 Description The issue is related to multiple unspecified vulnerabilities in the browser engine, allowing remote attackers to cause a denial of service, such as memory corruption and application crash, or...
PT-2014-8471
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.4 phpMyAdmin versions 4.1.x through 4.1.14.5 phpMyAdmin versions 4.2.x through 4.2.10.0 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted...
FineCMS 最新版存储型xss跨后台getshell和多处xss合集
简要描述： FineCMS 最新版xss跨后台getshell和多处xss合集，我知道这个厂商习惯性忽略，但是这只是一个开始，一个开始，开始........................... 详细说明： 首先我们演示一下第一个xss,通过这个xss，反弹后台getshell: 第一步，我们注册一个用户，如果管理员审核通过，也就是说这个用户是个普通的正常用户 我们去图片发表处： 下来我们看看本页也能弹出来: 下来我们去后台看看 是否能够弹出来： ok 到这里我们已经看到了这个xss，肯定会引起管理员的审核： 下来我们更换xss的payload： 我们用iframe标签： 加载远端js...
Discuz!x xss反弹后台无防御sql注入getshell(附带exploit)
简要描述： Discuz!x xss反弹后台无防御sql注入getshell，这里的xss只是做一个药引子，因为xss来自日志功能，然而这个日志功能却又默认关闭的，为了测试我们开启它。这个漏洞应该是所有dz通杀的，我下载了最新版本的所以测试通过...... 详细说明： 首先我们开启日志功能，然后存储一个xss看看： 测试一个xss页面： 我们调到文章页面看看，是否被执行了： 下来我们看看怎样把这个发给管理员呢，底下有一个举报页面： 我们以管理员的身份看看这个后台的举报请求： 这个过程我们分析完毕了，下来我们看看后台一处，无防御的sql注入：...
vBulletin 5.1.x - Persistent Cross-Site Scripting
Title: vBulletin 5.1.X - Cross Site Scripting Date: 05.09.14 Version: = 5.1.2 Latest ATM Vendor: vbulletin.com Contact: smash at devilteam.pl 1 Agenda Latest vBulletin forum software suffers on persistent cross site scripting vulnerability, which most likely can be used against every user, such a...
CVE-2014-5274
Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...
CVE-2014-5273
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 browse table page, related to js/sql.js; 2 ENUM editor page, related to...
CVE-2014-5274
Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...
CVE-2014-5273
CVE-2014-5273 corresponds to multiple XSS vulnerabilities in phpMyAdmin affecting 4.0.x (<4.0.10.2), 4.1.x (<4.1.14.3), and 4.2.x (
CVE-2014-5274: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...
CVE-2014-5273: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 browse table page, related to js/sql.js; 2 ENUM editor page, related to...
PT-2014-6386
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.1.x through 4.1.14.2 phpMyAdmin versions 4.2.x through 4.2.7.0 Description A cross-site scripting XSS issue exists in the view operations page, allowing remote authenticated users to inject arbitrary web script or HTML vi...
php云问答功能处存储型xss
简要描述： 需要主动触发。 详细说明： http://www.hr135.com/ask/index.php 测试地址：http://www.hr135.com/ask/index.php?c=content&id=162 超级链接写入：javascriptalert1 &NewLine是HTML5新增的实体命名编码 firebug之类工具修改链接名称增加欺骗性 成功触发JS 使用追问功能再次添加超级链接：javascriptalertdocument.cookie 成功弹出cookie 漏洞证明：...
JS MultiHotel 2.2.1 - refreshDate.php roomid Parameter Reflected XSS
The js-multihotel WordPress plugin was affected by a refreshDate.php roomid Parameter Reflected XSS security vulnerability...
JS MultiHotel 2.2.1 - includes/delete_img.php path Parameter Reflected XSS
The js-multihotel WordPress plugin was affected by an includes/deleteimg.php path Parameter Reflected XSS security vulnerability...
Traffic Analyzer 3.3.2 - js/ta_loaded.js.php aoid Parameter XSS
The trafficanalyzer WordPress plugin was affected by a js/taloaded.js.php aoid Parameter XSS security vulnerability...
Js-appointment <= 1.5 - SQL Injection
The Js-appointment WordPress plugin was affected by a SQL Injection security vulnerability...
